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APPELLANTS' APPEAL BRIEF 



Sirs: 



Appellants rcspectftiUy appeal the final rejection of claims 1-21 in the Office Action 
duled January 1 2005. A Notice of Appeal was timely filed on April 1 1 , 2005. 
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I. REAL PARTY IN INTEREST 

The real party in interest is International Uusincss Machines Corp., Arinonk, New York, 
assignee of' 100% interest of the above-referenced patent applicaiion. 

II. RELATED APPEALS AND INTERFERENCES 

There are no otlicr appeals or interferences known to Appellants, Appellant' legal 
representative or Assignee which would directly afleci or be directly affected by or have a 
bearing on the Board's decision in this appeal. 

IIL STATUS OF C L ATMS 

Claims 1-21 are all the claims pending in tlie application and are set forth fully in the 
attached appendix- Claims 1-21 were originally filed in the application. A first Office Action 
was issued on May 6, 2004 rejecting claims 1 -21 . Appellants filed an Amcndenl under 37 
C,F,R. §1.1 11 on July 28, 2004 amending the claims 1, 8 and 15, An al\cr-final Office Action 
was issued on Januaiy 1 3, 2005 rejecting claims 1 -2 K Appellants filed an Amcndent under 37 
CF.R. §1.1 1 6 on March 1 , 2005 further amending the claims 1, 8 and 1 5, An Advisory Action 
was issued on April 5, 2005 indicating that the proposed amendment filed on March 1, 2005 
would not be entered for piu"poses of appeal, and that claims 1 -2 1 would remain rejected on prior 
art grounds. Claims 1-21 stand rejected under 35 U^S.C. § 102(e) as being anticipated by Sziklai 
et al. (U.S. Patent No, 6,341,287), hereinafter referred to as "Sziklai". 

IV- STATEMENT OF AFTER-FINAL AMENDMENTS 

An after- final OJTice Action dated January 1 3, 2005 stated thai claims 1-21 were rejected. 
Appellants filed an Amcndcnt under 37 C.F,R, §1.1 16 on March 1 , 2005 amending claims 1, 8 
and 15. An Advisory Action was issued on April 5, 2005 not entering the March 1 , 2005 
Amendment for purposes, of appeal. The claims shown in the appendix are shown in their 
amended form as of the July 28. 2004 Amcndmenl^ 

V. SUMMARY OF THE INVENT ION 

10/015,256 2 
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_ The Appellants' invenii(>n-is descrihcd-in pages 4-16 (paragraphs [GOMl through [0047ir ' 
of the specification and shown in Figures 1 through 5 of the application as orifimally filed The 
Appellants' invention provides a structure and method for a new and improved database 
management system for security and authorization development tools. 

In order to attain the object suggested above, there is provided, acconJing to one aspect of 
the invention, a methoti for tracking custom computer application development pro£iles> in a data 
processing system (and a program storage device readable by machine, tangibly embodying a 
pn>gram of instructionii executable by the machine to perform a method for tracking cu$tom 
computer application davelopmcm profiles in a data processing system), wherein the method 
comprises creating the profiles with a lirsl database tool (described on page 8, lines 8-19 of the 
specification as originally fileH); gathering requirements of the profiles with a second database 
tool (described oh page lines 8-19 of the specification as originally filed); tracking 
modifications of the pn>filcs with a third database tool (described on page 8, Imes 8-19 of the 
specification as originally filed); allowing security and authorization users access to the profiles 
(via a Security and Authorization Team Interface 25 of Figure 1 and described on page 8, lines 8- 
1 9 of the specification as originally filed); and determining whether breaches in security of the 
data processing system has occurred in each phase of development of a computer application 
program via the Security and Authorization Profile Change Request Database 28 of figure 1 and 
described on page 1 1 , lines 1 9-23 of the specification as originally filed. In tlie step oflracking 
modifications of the profiles with a third database lool^ the third database tool comprises a 
Profile Matrix, wherein the Profile Matrix comprises a data set as described on page 8, lines 20- 
22 of the specification as originally filed. Moreover^ in the step of tracking modifications ofthe 
profiles with a third database tool, the third database tool allows tracking capability of tasks 
required to gather and implement changes to the profiles as described on page 8, line 22 through 
page 9, line 8 of the specification as originally Hied. Tn the step of gathering requirements ofthe 
profiles with a second database tool, the second database tool cornpriscs a prolile requLrcmeni 
worksheet, wherein the profile requiremcnl: worksheet (PRW 26 olTigure 1) identifies the data. 
I^urthcrmore, in the step of gathering requirements ofthe profiles witli a second database tool, 
the second database tool ftjrther identifies authorization objects and field values ofthe profile 
requirement worksheet necessary to gather the T^quircmcnls ofthe profiles as described on page 
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9,.lmcs 3-8 of the specification as originaUy filed, -Also, tKc step of creating the profiles with a 
first database tool further comprises editing the profiles, wherein in the step of creating the 
profiles with a first database tool, the first database tool comprises a security and authorization 
profile change request database, wherein the security and authorization profile change request 
database aUows the authorization users and requestors an abih'ty to view documented progress ol' 
queries ofthe profiles as described on page 9, lines 9-12 of the specification as originally filed. 

As described on page 8, line 1 through page 1 0, line 4 ofthe specification as origi nally 
filed Another embodiment ofthe invention provides a computer system executing a method for 
tracking custom computer application development profiles in a data processing system, wherein 
the computer system omprises a first database tool, a second database tool connected to the first 
database tool, a third database tool connected to the first and second dambase tools, a data bank 
connected to the first, second and third database tools, and a security and authorization interface 
connected to the data processing system. 

The first database tool comprises a first .set of protocols which create and edit the profiles. 
The second database tool comprises a second set of protocols which gather requirements ofthe 
profiles. The third date^base tool comprises a third set of protocols which track modifications of 
the profiles. Ihc third database tool is adapted to determine whether breaches in security ofthe 
data processing system has occurred in each phase of development of a computer application 
program. 

Mcmjover, the first database too! comprises a security and authorization profile change 
request database 28 (Fisjure 1) wliich allows the authorization usere and requesters the ability to 
view documented progress of their queries pertaining to the profiles, l-iuthermore, the .second 
database tool comprises a profile requirement worksheet 26 (Figure 1 ) which idenUfies the data. 
Additionally, the second database tool Jurther idcntilies authoriimtion objects and field values of 
the profile requirement worksheet necessary to gather the requirements ofthe profiles. Finally, 
the third database tool comprises a Profile Matrix 24 (Figure 1 ) wliich comprises a data set. 
Also, the third database tool allows tracking capability of tasks required to gather and implement 
changes to the profiles. 

There arc several benefits of the present invention. First, prior to the present invention, 
no system provides a method and system for tracking updates to cJianges in profiles of 
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Specifications required for software coding and developmenL Moreover, no other systjcm or 
method provides a history of the updates and changes in a clear and concise manner, as docs the 
present invention. Furthermore, the present invention significantly reduces cycle times and 
administrative coals in the auditing procedures synonymous with software development. 
Additionally, ihe present invention provides for a ftilly-dwumcnted database which aids in the 
internal auditing and control process. Finally, the present invention provides the ability to ensure 
that software development for a particular program or release is secure in terms of providing 
access to the development information (such as specifications, requirements, cuslcmiized 
soluli<ms, coding* proirrammcrs' comments, etc) to only those individuals and entities absolutely 
required to have such information. 

VI. ISSUES PRESENTED FOR REVIEW 

The issues presented for review by the Board of Patents Appeals and Interferences are 
whether claims 1-21 island rejcctea under 35 U.S.C. §102(e) as being anticipated by Sziklai, etal. 
(U.S. Patent No. 6,341 ^287), hereinatW referred to as Sziklai. 

VII. ARGUMENT 

A. The Prior Art RejcctiAns Based on 35 1 J.S.C. § 1 03(a) 
1. The Position in the Office Action 

Claims 1-21 stand rejected luidcr 35 U.S.C. § 1 02(e) as being aiilidpated by S/Jklai (U.S. 
Patent No. 6,341 ,2«7). According to the OtTice Action, as to claim 1 (the Office Action 
infcrenliaJly rejects claim 1 5 bajwd on the same rejection made for claim 1 ), Sziklai teaches a 
method for tracking cujrtom ct>mputcr application development profiles in a data processing 
system (See abstract, where "custom computer application" is read on "information on 
operations and requirements concerning an activity or area of business"; also see column 8, lines 
60-65), the method compri.sing creating the profiles with a first database tool (Sec column 8, 
lines 25-41, lines 60-67; coluimi 9, lines 1-3, where "profiles" is read on "business operations" 
also see column 9, lines 1 3- 1 9); gathering requirements of the profiles with a second database 
tool (See abstract; column 10, lines 24-33, where "disposal of hazardous waste in landfills" is 
used as an example of collecting profile data and regulations); tracking modifications of the 

10/015,256 < 



PAGE5123*RCVDAT5f31i20052:32:57PM[Ea$temDaylightTime]*SVR:USPTO€FXIV-1H * DURATION (min-ss):07-04 



SENT BY: MCQINN& QIBB; 



301 261 B625 ; MAY-BI-OS 14:05; 



PAGE 6 



profiles with a third database tool (See column 8, lines 65-67; column 9, lines 1-3; column 32, 
lines 24*34); allowing security and authorization users acc<;ss to the profiles (See column 9, lines 
13-19; colunrn 14, lints 50-58; column 21, lines 65-67); and determining whether breaches in 
security of the daUipn)ce$sing system has occurred In each phase of development of a computer 
application program (See abstnicl; column 9^ lines 10-16; column 14, lines 50-62; column 21, 
lines 65-67; column 33, lines 5-10; column 34, lines 1-4). 

As to claims 2, 9, and 16, the OfHcc Action opines that Sziklai teaches wherein in the 
step of tracking modii>culions of the profiles with a third database tool, the third database tool 
comprises a Profile Matrix, wherein the Profile Matrix comprises a data set (See colunm 1 3, 
lines 1 4-22; column 2f>, lines 56-67; column 26, lines 1 -7); wherein the third database tool 
comprises a Profile Matrix, and wherein the Pn>Hle Matrix comprises a data set. (See column 13, 
lines 14-22; colunm 25, lines 56-67; column 26, lines 1-7); wherein the third database tool - 
comprises a Profile Matrix, and wherein the Profile Matrix comprises a data set (See column 13, 
lines 14-22; column 25, lines 56-67; column 26, lines 1-7). 

As to claims 3, 10, and 17, the Office Action argues that Sziklai teaches wherein in the 
step of tracking modifications of the profiles with a third datahase tool, the third database tool 
allows tracking capability of tasks required to gather and implement changes to the profiles (Sec 
abstract; colimm 7, lines 42-57; column 8, lines 25-41; column 9, lines 58-61); wherein the third 
database tool allows tTsicking capability of tasks required to gather and implement changes to the 
profiles (Sec abstract; column 7, lines 42-57; column 8, lines 25-41 ; column 9, lines 58-61 ); 
wherein in the method, the step of tracking modifications of the profiles with a third database 
tool allows tracking capability of tasks required to gather and implement changes to the profiles 
(See abstract; column 7, lines 42-57; column 8, lines 25-41 ; tiolumn 9, lines 58-61). 

As to claims 4, 11 , and 18, the Office Action suggests that Sziklai teaches wherein in the 
step of gathering requirements of the profiles with a seci^nd database tool, the second database 
tool comprises a profile requirement worksheet, wherein the profile requirement worksheet 
identifies the data (See column 9, lines 32-40, where ^'worksheet" is read on "worklist"; column 
10> lines 47-53); whereiin the second database tool comprises a profile requirement worksheet, 
and wherein the profilt- requirement worksheet identifies the data (Sec column 9, lines 32-40^ 
where '^worksheet" is read on "worklist"; column 10, lines 47-53); wherein tlie second database 
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lool comprisefs a profile requirement worksheet, and wherein the profile requirement worksheet 
identifies the data (Sec column 9, litics 32-40, where "worksheet" is read on "worklist"; column 
10, lines 47-53). 

As to claims 5, 1 2, and 19, it is the position in the Office Action that Sziklai teaches 
wherein in the $tep of gathering requirements or the profiles with a second database tool, the 
second database tool farther identifies authorization objects and field values of the profile 
requirement worksheet necessary to gather the requirement- of the profiles (See column 1 1 , lines 
13-22, lines 28-30; column 21, lines 11-15); wherein the second database tool further identifies 
authorization objects and field values of the profile requirement worksheet necessary to gather 
the requirements of the profiles (See colunm .11, lines 13-22, lines 28-30; column 21, lines 1 1- 
1 5); wherein the second database tool f urther identifies authorization objects and field values of 
the profile rcquiremenl worksheet necessary to gather the requirements of the profiles (See 
column 11, lines 13-22, lines 28-30; colunm 21, lines 11-15). 

As to claims 6: 1 3, and 20» the Office Action concludes that Sziklai teaches wherein the 
step of creating the pr4>files with a first database tool further comprises editing the profiles (See 
column 19, lines 30-32; colunm21, lines 21-23); wherein the first database tool edits the profiles 
(See column 19, lines 30-32; colunm 21, lines 21-23); wherein in the method, the step of creating 
the profiles with a first database tool further comprises cdhing the profiles (See colunm 19, Imes 
30-32; column 21, lines 21-23). 

As to claims 7. 14, and 21, the Ollice Action indicates that Sziklai teaches wherein in the 
step of creating the profiles with a first database tool, the first database lool comprises a security 
and authorization pr<)H1c change request database, wherein the security and authorization profile 
change request database allows the authorization users and requestors an ability to view 
documented progress of queries of the profiles (See column 11, lines 36-42, where 
"authorization users and requestors" is read on "configuration user"; column 29, lines 63-64; 
column 30, lines 17-25); wherein the first database tool comprises a security and authorization 
profile change request database, and wherein the security and authorization profile change 
request database allows the authorization users and requestors an ability to view documented 
progress of queries of the protiles (See column 1 1, lines 36-42, where "authorization users and 
requestors" is read on "configuration user"; colunm 29, lines 63-64; column 30, Imes 17-25); 

10/015,256 7 
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wherttin lhc first database lool comprises a security nnd authorization profile change request 

database, and wherein the security and autharization profile change request database allows the 
authorization users and requestors an ability lo view documented progress of queries of the 
profiles (Sec column -1, lines 36-42, where "autharization users and requestors" is read on 
"configuration user"; column 29, lines 63-64; column 30, lines 17-25). 

As to claitn 8, tlie OfUce Action states that S/iklai teaches a computer system executing u 
method for tracking custom computer application development profiles in a data processing 
system (See abstract, where "custom computer appMcati«)n" is read on "'information on 
operations and requirements concerning an activity or area of busmess"; also sec column 8, lines 
60*65), tlic system comprising a first database tool (Sec absiMCt; column 32, lines 12-21 ; column 
34, lines 5-8); a second database tool connected to the first database tool (See abstract; column 
32, lines 24-3 1 ; column 34, lines 5-8); a third database tool connected to the first and second 
database tool (See abstract column 32, lines 32-41 ; column 34^ lines 5-8); a data bank connected 
to the first, second and third database t<x)1 (See abstract; column 34, lines 5-8); and a security and 
authorization interface connected to the data processing system (See column 9, lines 13-1 9; 
column 14, lines 50-58; column 21, lines 65-67), wherein the first database tool comprises a' lirsi 
set of protocols which create the profiles (See column 8, lines 25-41 , lines 60-67; column 9, lines 
1-3, where ''profiles'' is read on "business operations''; also see column 9> lines 13-19), wherein 
the second database tc»ol comprises a second set of protocols which gather requirements or the 
profiles (See abstract; colunm 10, lines 24-33, where "disposal of hazardous waste in landfills" is 
used as an example ofcollecting profile data and regulations); wherein the third database tool 
comprises a third set i)f protocols which track modifications of the profiles (See column 8, lines 
65-67; column 9, lines 1-3; column 32, lines 24-34); imd detennining whether breaches in 
security of the data prc>cessing system has occurred in each phase of development of a computer 
application program (See abstract; column 9, lines 10-16; column 14, lines 50-62; column 21 , 
lines 65-67; column 33, lines 5-10; column 34, lines 1-4). 



2. The Sziklai Reference 

Sziklai teaches an integrated system for managing changes in regulatory and non- 
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regulatory-requirements for business activities at-an industrial or commercial f^^ 

of applications of this system include environmental, health and safety activities, and food, drug, 
cosmetic, and medical treatment and device activities. The $yslem provides one or more 
databases that contain information on operations and requirements concerning an activity or area 
of business; receives information on regulatory and non-regulatory changes that affect operations 
of the business; converts these changes into changes in data entry forms, data processing and 
analysis procedures, and presentation (by priming, electronic display and/or distribution) of data 
processing and analysis results to selected recipients^ without requiring the services of one or 
more pri)granuncrs to re-key and/or reformat the items aflFectcd by the change; and implements 
receipt of change information and dissemination of data processing and analysis results using the 
facilities of the Internet 

B» Appellants' Position 

1, Tndependent Claims 1 and 15 

Appellants respectfully traverse the rejections in the Office Action of independent claims 
1 and 15 based on the following discussion. Independent claims 1 and 15 contain features, 
which are patentably tlistinguishable from the prior art references of record, and in particular 
Sziklai. Specifically., claims 1 and 15 provide, in part, "... determinirm whether breaches in 
security of said data processinti system has oceurrcd in each phase of development of a c;omputcr 
a pplication nnyaranL" These features are simply not taught or suggested in STnklai. 

Page 9 of the (DffTce Action admits that Sziklai "does not go into full detail of 
^detennining security breaches''". Nonetheless, the Office Action conchides that Sziklai 
sufficiently teaches or anticipates ^'^ detetminine whether breaches in security of .said data 
processing system ha^ occurred in each phase of development of a computer application 
program ^'' as prt)vided in the claimed invention. It appears that the Hxaminer has chosen to 
conduct a keyword search in the Sziklai reference looking for any mention of the word 
'^sccurity^^ and h-ds ustd this to conclude that Sziklai leaches the above feature of the claimed 
invention irrespective of what context Sziklai is using the word "security" in, and how broadly 
the term is being used in Sziklai. As such. Appellants strongly suggest that with respect to the 
determination of security breaches, Sziklai is and should properly be considered a non-enabling 

10/015,256 9 
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reference, and thus should not be considered as prior art for the purposes of teaching - 
^ 'determining whether breaches in security of said data proce ssini^ system has occurred in each 
phase of dfiv^ l ppment of a com puter application oroeram." 

in fact, case law suggests that non-e na bling inventions should not be considered prior an. 
See, e.g.» In re Wilder . 429 F.2d 447, 166 USPQ 545, 548 (CC.P.A. 1970) (anticipation 
rejection): 

However, such disclosure may yet be held not to legally uniicipate tlie claimed 
subject matter if it is found not to be .sufficiently enabling, in other words, it' lt 
docs not place the subject matter of the claims within the possession of the public. 
See, e.g.. In LcGrice . 301 F.2d 929, 133 USPQ 365 (CCPA. 1962); in re 
Bipwn, 329 F.2d 1006, 141 USPQ 245 (C.C.P.A. 1964). 

I'hc Federal C rcuit went on to provide, "the prior art must enable one skilled in the art to 
make and use the appiiratus or method." Rockwell IntM Corn, v. U nited States, 147 F.3d 1358» 
47 USPQ 2d 1027, 1032 (Fed. Cir. 1998) (citing Motorob. Inc. v. Tnterdi Lfital Tech. Corp., 121 
F.3d 1461, 1471, 43 LISPQ 2d 1481, 1489 (Fed. Cir. 1997). 

Here, as admitted in the Office Action (see page 9). Sziklai docs not "does not go into 
lull detail of ^determining security breaches"'. Thus, Sziklai docs not properly enable one 
skilled in the art to muke and use the invention in Sziklai lor the purposes of the manner and 
approach of determining whether security breaches occur. Furthermore^ with respect to 
determining whether security breaches occun clearly Sziklai doe^ not place the claimed 
invention within the posJses.sion of the public as required by well-established and legally binding 
case law. 

AddiLiuniiny, even if by some inexplicable chance lhai one of ordinary skill in the art 
would refer to Sziklai and conclude that it sufficiently teaches determining whether security 
breaches occur, it would be a gross stretch of reason tlutt one of ordinary skill in the art would 
conclude that Sziklai sufficiently teaches determining whether breaches in security of a data 
processing system ha<! occurred in each phase of development of a computer application 
program . There is simply no teaching of this aspect or reasonable interpretation of the broad 
non-enabling concepts described in Sziklai of this second aspect of the claimed feature. 

Again, the fea:ures relating to security are novel Features not taught la Sziklai. 
Specifically, column 0, lines 13-16 of Sziklai only gcncrically refers to the fact that security is an 

10/015,256 10 
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important feature in dilabasfe management. Thcrc is no mention of how such an implementation 
of security is to take place, let alone a determination ol' when breaches in security occur in the 
development of a <u^frivare program (i.e., computer application program). That is, there is 
nothing in this ianguaige that suggests that dctennining whether breaches in security of a data 
processing system has occurred in each phase of development oF a compute y application 
program > 

Next, column 14., lines 50-58 of Sziklal refer to **[t]he Java security model prevents 
unauthorized tampering with the client mactiine using non-authenticated code.** However, this 
merely suggests that Sziklai's system ases a Java firamework for preventing unauthorized 
tampering using non-aulhentioated code. However, this does not suggest^ and no logical 
interpretation of this would suggest that the Java framework i mplemented by Sziklai can 
determine whether security breaches have occurred in all phases of the develot>ment of a 
so ft ware proaram . Furthermore^ column 21 , lines 65-67 of Sziklai once again very generically, 
and in non-enabling hinguage, establishes implementing a security role to grant/restrict access to 
the database. However, there is no teaching of how this is accomplished in the context of 
software developmcni , let alone in what phase of development of the software program this 
occurs. 

This is particularly clear because Sziklai tbcuses on the application oFits system to 
environmental, health and safety activities, and ft>(>d, drug, cosmetic, and medical treatment and 
device activities, and aot computer program (sollware) development as does the claimed 
invention. In other words, Sziklai*s system is not implcmcntablc in a software development 
scheme provided by tlic claimed invention. Thus, Sziklai's system is incapable of monitoring all 
phases of software development and determine whether security breaches have occurred, thereby 
clearly establishing the claimed invention novel and patentable over Sziklai. Therefore, Sziklai 
does not teach the clc/nents provided by independent claims 1 and 15, thereby making 
independent claims I and 15 patentable over S/.iklai. Thus, the Appellants respectfully request 
that the rejections to claims 1 and 15 be reconsidered and withdrawn. 

2. Independent Claim 8 

Appellants respectfully traverse the rejections in the Office Action of independent claim 

10/015,256 11 
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8 based on the following discussion. Independent cJaim 8 contain5s features, which are 
patenlably distinguishable from the prior art references of record, and in particular $/.iklai. 
Specifically, claim 8 provides, in part, wherein said third databa se tool is adapted to 
determine whether breaches in secu rity of said data processing system has occurred in each 
phase of development of a computer application program.* " These featurei> are simply not taught 
or suggested in S/iklai. 

Page 9 ofthe Office Action admits that Srfklai "docs not go into fiill detail of 
'determining security breaches"'. Nonetheless, the Office Action concludes that Sziklai 
sufficiently teaches or anticipates ** to determine whether breaches in security of said data 
proces&inc system has occurred in each phase of development of a compu ter application 
progmm " as provided in the claimed invention* It appears that the lixaminer has chosen to 
conduct a keyword search in the Sziklai reference looking for any mention ofthe word 
^'security'' and has used this to conclude that Sziklai leaches the above feature ofthe claimed 
invention irrespective of what context Sziklai is using the word "security" in, and how broadly 
the term is being used in Sziklai. As such. Appellants strongly suggest that with re^)cct to the 
determination of secui-ity breaches, Sziklai is and should properly be considered a non-enabling 
reference, and thu^ should not be considered as prior art for the purposes of teaching "to 
determine whether breaches in security of said data processing system has occurred in each 
phase of dcvclopmenl of a computer application pnoHTdm ," 

Tn tact, case law suggests that non-enabling inventions should not be considered prior art. 
See, e.g., Tn re Wildct , 429 l\2d 447, 166 USPQ 545, 548 (C.CP.A, 1970) (anticipation 
rejection): 

However, such disclosure may yet be held not to legally anticipate the claimed 
subject mattcf if it is found not to be sufficiently enabling, in other words, if it 
docs not place the subject matter ofthe claims within the possession of the public. 
See, e.g.. In le LeGrice . 301 F.2d 929, 133 USPQ 365 (C\C.P.A. 1962); In re 
Brown , 329 F.2d 1006, 141 USPQ 245 (C.C.P.A. 1964). 

The Federal Circuit went on to provide, "the prior art must enable one skilled in the art to 
make and use the apparatus or method.'* Rockwell Int'1 Corp. v. United States , 147 F.3d 1358, 
47 USPQ 2d 1027, 1032 (Ped. Cir. 1998) (citing Motorola. Inc. v, Interdisital Tech. Corp., 121 
F.3d 1461, 1471, 43 USPQ 2d 1481, 1489 (Fed. Cir, 1997). 

10/015,256 12 
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Here, as admitted in ihe Office Action (see page 9), Sziklai does not "does noi go into 
fiiii detail of ^determining security breaches*''. Thus, Sziklai does not properly enable one 
skilled in the art lo make and use the invention in Skdklai for the piurposes of the manner and 
approach of determining whether security breaches occur. Furthermore, with respect to 
determining whether security breaches occur, clearly Sziklai docs not place the clauned 
invention within the possession of the public as required by well-established and legally binding 
case law. 

Additionally, even if by some inexplicable chance that one of ordinary skill in the art 
would refer to Sziklai and conclude that it sufficiently teaches determining whether security 
breaches occur, it would be a gross stretch of reason that one of ordinary skill in the art would 
conclude that Sziklai iiufficienlly teaches to determine whether breaches in security of a data 
processing system has occurred in each phase of development of a c omputer anpltcation 
program , 'fhew is simply no teaching of this aspect or reasonable interpretation of the broad 
non-enabling concept^; described in Sziklai of this second aspect of the claimed feature* 

Again, the features relating to security are novel features not taught in Sziklai. 
Specifically, column 9, lines 1 3-16 of Sziklai only generically refers to the fact that security is an 
important feature in database management, fhere is no mention of how Jiuch an implementation 
ot security is to take place, let alone a determination of when breaches in security occur in die 
development ofa software program (i.e., computer application program). That is, there is 
nothing in ihis language that suggests determining whether breaches in security ofa data 
processing system ha.^ occurred in each phase of development ofa comp uter application 
prpgram. 

NexU column 14, lines 50-58 of Sziklai refer to "lt]hc Java security model prevents 
unauthorized tampcrljig with the client machine using non-authepticated code." However, this 
merely suggests that Sziklai's system uses a Java framework for preventing unauthorized 
tampering using non-authenticated code. However, this docs not suggest, and no logical 
interpretation of this would suggest that the Java framework implemented by Sziklai can 
determine whether security breaches have occurred in all phases of the development ofa 
softw are prograin . Furthermore, column 21, lines 65-67 of S/iklai once again very generically, 
and in non-enabling l:mguage, establishes implementing a security role to granl/rcstrict access to 

10/015,256 13 
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the database. However, llierc is no ttsaching of how this is acconipHshcd in the ctmtext of 
software dcvelopmenU let alone in what phase of development of the software program this 
occurs. 

This is paiticu^arly clear because Sziklai I'ocuscs on tlie application of its system to 
environmental, health and safety activities, and food, drug, cosmetic, and medical treatment and 
device activities, and not computer program (software) development as does the claimed 
invention. In other words, Sziklai's system is not implemeniabic in a software developmcait 
scheme provided by tlie claimed invention. Tlius, Sziklai's system is incapable of monitoring all 
phases of software development and detemiinc whether security breaches have occurred, thereby 
cltsarly establishing the claimed invention novel and patentable over Sziklai. Thereibte, Sziklai 
docs not teach the elements provided by independent claim 8, thereby making independent 
claims 8 patentable ON'cr Sziklai. Thus, the Appellants respectfully request that these rejections 
be reconsidered and withdrawn. 

3. Dependent claims 2^ 9, and 16 

Appellants respectfully traverse the rejections in the Ollicc Action of dependent claims 2, 
9, and 1 6 based on th(i following discussion. Dependent claims 2, 9, and 16 contains features, 
which are patentably distinguishable from the prior art references of record, and in particular 
Sziklai. Spccifioany, claims 2, 9, and 1 6 provide, in part, '\ , . said third database tool comprises a 
Profile Matrix, and wherein said Profile Matrix comprises a data set. " Tlie.se Icatures are simply 
not laughi or suggested in Sziklai. The report matrix tabic 52 of Sziklai merely provides the 
"definitions of matrix reports" (sec col. 13, lines 1 5-1 6 of Sziklai). This is patentably distinct 
fi-om the Appellants' Profile Matrix, which according to page 10, lines 19-22 of the specification 
as originally filed, prc»vides for the ability to not only track the profile progress of projects 
currently in devclopirent and for use in the production environment for company-specific 
interna! control audits and certificati<in reviews. Therefore, Sziklai does not leach the elements 
provided by dependent claims 2, 9, and 16, thereby making dependent claims 2, 9, and 16 
patentable over Sziklai. Thus, the Appellants respectfully request that these rejections be 
reconsidered and withdrawn. 

10/015,256 14 



PAGE14/23'RCVDAT5/31f20052:32:57PM[EastemDaylightTline]'SW^^ ' DURATION (mm'SS):07-04 



SENT BY: MCQINN& QIBB; 301 261 B825 ; MAY -31 -05 14:00; PAGE 15/23 



4. Dependent claims 3, 10, and 17 

Appellants resiDectfully traverse the rejecUons in the Oflice Action of dependent claims 3, 

1 0, and 17 based on the following discussion. Dependent claims 3, 1 0, and 1 7 contains features, 
which arc pateniably distinguishable from Ihe prior art references of record, and in particular 
Sziklai, Specifically, claims 3 JO, and 17 provide, in part, ^^ said third database tool allows 
a^gking ca pability of tasks required to aather and im plement changes to said profiles/' These 
features arc simply not taught or suggested in S/iklal. Again it appears that the Examiner has 
partaken in a keyword search of Sziklai to try and find all occurrences of ihc word "changes". 
While Sziklai discusses managing changes in regulatory and non-regulatory requirements for 
business activities at eJi industrial or commercial facility (abstract), there is no mention in Sziklai 
of using a database to track the capability of tasks required to gather and implement changes to 
computer application development profiles as does Appellants' claimed invention. Therefore, 
Sziklai does not teach the elements provided by dependent claims 3, 1 0, and 17» thereby making 
dependent claims 3, 1 0, and 17 patentable over Sziklai, Thus, the Appellants respectfully request 
that these rejections be reamstdercd and withdrawn. 

5, Dependent claims 4, 1 1<» and 18 

Appellants respectfully traverse the rejections in the Oflicc Action of dependent claims 4, 

1 1, and 18 based on the following discussion. Dependent claims 4, 1 1 , and 18 contains features, 
which arc patentably distinguishable from ihe prior art references of record, and in particular 
Sziklai. Specifically^ claims 4, 1 1, and 18 provide, in part, ''.,. said second databa.sc tool 
conipriscs a profile requirement worksheet, and wherein said profile requirement worksheet 
identifies said data>^ ' These features are simply not taught or suggested in Sziklai. Appellants' 
profile requirement worksheet identifies the data in the Profile Matrix, Conversely, in Sziklai, 
the Workl.ist is creaU^d manually in a Set Up WorkList function (as provided in coL 10, lines 54- 
61) "to guide an End CJser through the tasks involved in recording a sample, tracking the sample 
through a chain-of-cu=^tody, printing a management report of all samples submitted for analysis, 
preparing and processing a government report, and printing or otherwise distributing the 

. government report on a required government form, or on the Internet, as a document image." 
Thus, there is nothing in Sziklai that suggests using the WorkList to identify data. Therefore, 

10/015,256 15 
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Sziklai docs not teach the elements provided by dependent claims 4» 1 1 , and 1 8, thereby making 
dependent claims 4, 1 1, and 1 8 patentable over Sziklai. Thus, the Appellants respectfijlly request 
that these rejections bo reconsidered and withdrawn. 



Appellants icspeclfuUy traverse Ihc rejections in the Office Action iifdcpendcnt claims 5, 
12, and 19 based on the ToUowing discussion. Dependent claims 5, 12, and 1 9 conmina features, 
which are patentably distinguishable from the prior art references of record, and in particular 
Sziklai, Specifically, claims 5, 12, and 19 pmvidc, in part, *'... said second database tool further 
identifies auQioflzation obiccls and field values of said profile recfuiremcnt worksheet necessagy 
to gather said requirements »r Aaid profiles ." These features are simply not taught or suggested 
in Sziklai. The Officct Action refers to ooL 1 1, lines 13-22, lines 28-30; and col. 21, lines 11-15 
of Sziklai as leaching the above features. However^ a closer reading of these sections of Sziklai 
indicate no such features. Specifically, there is fmi reference to "identifying authorization objects 
and field values of a profile requirement worksheet" or a reasonable equivalence of such 
references. Rather, these sections of Sziklai merely refer to a user making configuration changes 
to a data entry form (such as display width, etc.). Thererore, Sziklai does not teach the elements 
provided by dependent claims 5, 1 2, and 19, thereby making dependent claims 5, 12, and 19 
patentable over Sziklfii, Thus, the Appellants respectfully request ihai these rejections be 
reconsidered and withdrawn. 



Appellants respectfully traverse the rejections in the Office Action of dependent claims 6> 
13, and 20 based on tlic following discussion. Dependent claims 6, 13, and 20 contains features, 
which are patentably distinguishable from the prior art references of record, and in particular 
Sziklai. Specifically, claims 6 and 20 provide, in part» . . said step of creatinu said profiles with 
a first database tool further comprises editing said profiles. '' Similarly, claim 13 provides, in 
part, . . said first database tool edits saidnrof ilcs." These features are simply not taught or 
suggested in Sziklai. The Office Action refers to col. 19, lines 30-32; and col. 21 y lines 21-23 of 
Sziklai as tcaclung the above features. However, a clf)ser reading of these sections of Sziklai 

10/015,256 16 



6. 



Dependent claims 5, 12, and 19 



7. 



Dependent claims 6, 13, and 20 



PAGE16/23*RCVDAT5/31/20052:32:57PM[EastemDaylight^^^^ * DURATION (mm-ss):0M14 



SENT BY: MCQINN& QIBB; 



301 261 6825 ; MAY-31-05 14:09; 



PAGE 1 



iiidlcale no such f eaiuj cs, Sziklai teaches "edit i mplements user edUing of a report, cither 
directly or tlirough selection and use of data entry fbnns supporting the report" and "edit form 
item implements editing of form fields. A spreadsheet format allows a user to easily rc-sequence 
and edit data for single or multiple fields." Hence, there is nothing in Sziklai reinoiely 
suggesting editing custom computer application development profiles as provided in Appellants' 
claimed invention. Therefore, Sziklai docs not teach the elements prt»vided by dependent claims 
6, 1 3, and 20, thereby making dependent claims 6, 1 3, dnd 20 patentable over Sziklai. Thus, the 
Appellants respectfully request thai these rejections be reconsidered and withdrawn. 

8* Dependent claims 7, 14, and 21 

Appellants respeclfully traverse the rcjcctiorus in the Office Action of dependent claims 7, 
14, and 21 based on tlw following discussion. Dependent claims 7, 14, and 21 contains features, 
which are patentably <listinguishable from the prior art references of record, and in particular 
Sziklai. Specifically, claims 7, 14. and 2 1 provide, in part, ..said fir st database tool comprises 
a security and authori'/alion profile change requ est database, wherein said security and 
authorizati on profile change request database allows said aulhorization users and requestors an 
ability to view documented progress of queries of said orofiles^" ' These features are simply not 
taught or suggested in Sziklai. Again it appears that the Examiner has purUiken in a keyword 
search of Sziklai to tr/ and find all occurrences of ihe word "query". While Sziklai discusses 
using an Advanced Query Builder (col. 11, lines 33-34), Ihcrc is no mention in Sziklai of 
allowing authorizatio]! users and requestors an ability to view a documented progress of queries 
of custom computer application development profiles as does Appellants' claimed invention. 
Tberetbrc, Sziklai docs not teach the elements provided by dependent claims 7, 14, and 21, 
thereby making dependent claims 7, 14, and 21 patentable over Sziklai. Thus» the Appellants 
respectfully request that these rejections be reconsidered and withdrawn. 

VIIL CONCIAJSION 

In view the forgoing, the Board is respectfully requested to reconsider and v^thdruw the 
rejections of claims 1 -21 . Please charge any deficiencies and credit any overpayments to 
Attorney's Deposit Account Number 50-0510. 

10/015,256 17 
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APFENDIX 

1 . (Previously Presented) A method for iracking custom computer application development 
profiles in a data processing system, said method comprising: 

creating said p:^)iilcs with a lirst database tooJ; 
gathering requirements of said profiles witli a second database tool; 
imcking modi lications of said profiles with a third dalabasc tool; 
allowing security and authorfyation users access to said proliles; and 
determining whether breaches in security of said data processing system has occurred in 
each phase of development of a computer application program. 

2. (Original) The method of claim 1, wherein in said step of traclcing modifications of said 
profiles with a third ditabase tool, said third database tool comprises a Profile Matrix, u^cicin 
said Profile Matrix comprises a data set. 

3. (Original) The method of claim 2, wherein in said step of imcking modifications of said 
profiles with a third database tool, said third database tool allows tracking capability of tasks 
required to gather and implement changes to said profiles. 

4. (Original) The method of claim 1 , wherein in said step of gathering requirements of said 
proliles with a second database tool, said second database tool comprises a profile requirement 
worksheet, wherem said profile requirement worksheet identifies said data. 

5. (Original) The method of claim 1 , wherein in said step of gathering requircmcnts of said 
10/015,256 19 
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profiles with a second database tool, said second database lool further identifies authorization 
objocts and Held values of said profile requirement worksheet necessary to gather said 
requirements of said profiles. 

6. (Original) I he method of claim 1, wherein said step of creating said profiles with a first 
database tool fijrther comprises editing said profiles. 

7. (Original) I'he method of claim 6, wherein in said step of creating said profiles with a 
first database tool, said first database tool comprises a security and authorization profile change 
request database, wherein said security and authorization profile change request database allows 
said authorization users and requestors an ability to view documented progress of queries of said 
profiles. 

8. (Previously Presented) A computer system executing a method for tracking custom 
computer application development profiles in a data processing system, said system comprising: 

a first database tool; 

a second database tool connected to said first database tool; 
a third database tool connected to said tirst and second database tiK>l; 
a data bank connected to said first, second and ihird database tool; and 
a security and authorization interface connected to said data processing system, 
wherein .said first database tool comprises a first set of protocols which create said 
profiles, 

wherein said second database tool comprises a second set of protocols which gather 
10/015,256 20 
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requirements of said profiles, 

wherein said third database tool comprises a third set of protocols which brack 
modifications of said profiles; and 

wherein said tJ^ird database tool is adapted to determine whether breaches in security of 
said data processing system has occurred in each phase of development of a computer 
application program. 

9. (Original) I he computer system of claim 8, wherein said third database tool comprises a 
Profile Matrix, and w)ierein said Profile Matrix comprises a data set 

10. (Original) The computer system of claim 9, wherein said third database tool allows 
tracking capability of tasks required to gather and implement changes to said profiles. 

1 1 . (Original) Tlic computer system of claim 8, wherein said second database tool comprises 
a profile requirement worksheet, and wherein said profile requirement worksheet identifies said 
data- 

12. (Original) The Ci^mpiiter system of claun 8, wherein said second database tool further 
identifies autlioriziition objects and iicld vahies of said profile requirement worksheet necessary 
to gather said requirements of said profiles- 

13. (Original) The; computer system of claim 8, wherein said first database tool edits said 
profiles. 

10/015,256 21 
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14. (Original) I he computer syslcm of claim 13, wherein said first database tool comprises a 
security and authorizaiion profile change request database, and wherein staid security and 
authorization profile change request database allows said authorizaiion users and requestors an 
ability lo view documented pn)gn;ss of queries of said profiles. 

15. (Previously Presented) A prognmi storage device readable by machine, tangibly 
embodying a program of instructions executable by Ihe machine to perform a method for 
tracking custom computer application development profiles in a data processing system, said 
method comprising; 

creating said profiles with a first database tool; 
gailicrlng requirements of said profiles witli a second database tool; 
tracking modilications of said profiles with a third database tool; 
allowing secuiity and authorization users access to said profiles; and 
determining whether breaches in security ofsaid data processing system has occurred in 
each phase of development of a computer application program. 

1 6. (Original) 1 he program storage device of claim 1 5, wherein said third database tool 
comprises a Profile Matrix, and wherein said Profile Matrix comprises a data set. 
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1 7. (Original) The piograni storage device of claim ) 6, wherein in said method, said step of 
trdttking modjficalionf of said pmfiles with a third database tool allows tracking capability of 
tasks required to gathix and implement changes to ssatd profiles. 

1 8. (Original) The program storage device of claim 15, wherein said second database tool 
comprises a profile rcquiremem worksheet, and wherein said prcifilc requirement worksheet 
identifies said data. 

19. (Original) The: program storage device of claim 1 5, wherein said second database tool 
further identifies authorization objects and field values of said profile requirement worksheet 
necessary to gather stiid requirements ofsaid profiles. 

20. (Original) 1 hu program storage device of claim 1 5, wherein in said method, said step of 
creating said profiles with a first daUbase tool further comprises editing said profiles. 

21 . (Original) Thz program storage device of claim 20, wherein said first database tool 
comprises a security and authorization profile change request database, and wherein said security 
and authorization pnjfilc change request database allows said authorization users and requestors 
an ability to view documented progress of queries ofsaid profiles. 
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